TS Poll – Survey, Versus Poll, Image Poll, Video Poll

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   TS Poll – Survey, Versus Poll, Image Poll, Video Poll

Information

Software Type Plugin
Software Slug poll-wp (view on wordpress.org)
Software Status Active
Software Author totalsoft
Software Website total-soft.com
Software Downloads 436,282
Software Active Installs 4,000
Software Record Last Updated July 10, 2026

7 Vulnerabilities

Submit a Vulnerability
TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.5.5 - Authenticated (Editor+) Server-Side Request Forgery
5.5
CVE-2026-25428
Jan 27, 2026
Researcher: Jakub Herman
TS Poll <= 2.5.5 - Missing Authorization
4.3
CVE-2025-68588
Dec 22, 2025
Researcher: daroo
TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.4.6 - Authenticated (Administrator+) SQL Injection via 's' Parameter
4.9
CVE-2025-3470
Apr 14, 2025
Researcher: broccoli
TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.4.0 - Authenticated (Administrator+) SQL Injection via orderby Parameter
7.2
CVE-2024-9022
Oct 9, 2024
Researchers:
TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.3.9 - Authenticated (Admin+) SQL Injection
4.9
CVE-2024-8625
Sep 30, 2024
Researcher: k0i3n
TS Poll – Best Poll Plugin for WordPress <= 1.5.8 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
Aug 25, 2021
Researcher: WPScanTeam
TS Poll – Best Poll Plugin for WordPress <1.3.4 - Missing Authorization
9.8
CVE-2020-11673
Apr 13, 2020
Researchers:
Title Status CVE ID CVSS Researchers Date
TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.5.5 - Authenticated (Editor+) Server-Side Request Forgery Patched CVE-2026-25428 5.5 Jakub Herman January 27, 2026
TS Poll <= 2.5.5 - Missing Authorization Patched CVE-2025-68588 4.3 daroo December 22, 2025
TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.4.6 - Authenticated (Administrator+) SQL Injection via 's' Parameter Patched CVE-2025-3470 4.9 broccoli April 14, 2025
TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.4.0 - Authenticated (Administrator+) SQL Injection via orderby Parameter Patched CVE-2024-9022 7.2 October 9, 2024
TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.3.9 - Authenticated (Admin+) SQL Injection Patched CVE-2024-8625 4.9 k0i3n September 30, 2024
TS Poll – Best Poll Plugin for WordPress <= 1.5.8 - Reflected Cross-Site Scripting Patched 6.1 WPScanTeam August 25, 2021
TS Poll – Best Poll Plugin for WordPress <1.3.4 - Missing Authorization Patched CVE-2020-11673 9.8 April 13, 2020

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation